Novell today announced it has expanded its Identity Assurance solution for the federal government, adding a critical identity management foundation to help federal agencies better meet Homeland Security Presidential Directive-12 (HSPD-12) requirements. Key enhancements include automating user and security credential provisioning to streamline the processes associated with the use of Personal Identification Verification cards. As a result, agencies can significantly reduce costs, improve efficiency and ensure compliance with HSPD-12.

HSPD-12 requires all federal employees and contractors to use Personal Identification Verification (PIV) cards for access to government IT resources and physical facilities. Novell first introduced an advanced authentication solution in July of 2005 that addressed integrated physical and logical access control requirements. Novell has now integrated its industry-leading identity management capabilities into the solution, delivering an enhanced offering that enables federal agencies to go beyond the basic HSPD-12 mandate. The Novell® solution now manages identity enrollment, registration, issuance and all maintenance associated with the PIV life cycle, including immediately preventing terminated users from entering federal networks, buildings and facilities.

“HSPD-12 requires federal agencies to improve security using more stringent identity proofing processes and PIV cards to authenticate and authorize access to both physical and logical systems,” said Gregg Kreizman, Research Director at Gartner. “Identity Management capabilities such as automated provisioning help to simplify the ongoing administration of PIV cards as required by HSPD-12.”

Novell has enhanced its Identity Assurance solution with the addition of new features in four critical areas of the PIV process:

Enrollment and Registration – With the Novell solution, agencies can secure, automate and track the processes for a government employee or contractor to obtain a PIV card. While integrating user information from disparate systems, the Novell solution also includes workflow for automating provisioning and email notifications to complete the verification and vetting process.

Card Issuance and Maintenance – Once an employee or contractor has successfully completed the enrollment and verification process, the Novell solution provisions the appropriate physical and logical IT systems based on the individual's role. If an employee is terminated, the Novell solution instantly revokes all rights issued with the PIV card. It also manages any role changes, such as changes in rank, and information changes, such as address updates.

Physical and Logical Access Control – The Novell solution provides single sign-on and enforces access control policies based on the individual's identity and authentication credentials. As a result, no one can access an agency's logical IT system or physical facility who does not have the privilege attributed to his or her PIV card.

Event Monitoring and Management – Novell also offers PIV event monitoring and management as an optional component of its Identity Assurance solution. This system provides a set of reports that allows authorized users to see the state of PIV issuance processes or card use in real time. It can also be extended to support enterprise-level security event monitoring and management need, as well as audit and compliance reporting requirements.

Reflecting HSPD-12 requirements for interoperability, the Novell Identity Assurance solution works seamlessly with various third-party sub-components needed to address HSPD-12, for example identity vetting, credential management systems and physical access controls. "As the deadline for HSPD-12 is fast approaching, federal agencies need trusted solutions that are proven to address the mandate, but also continue to evolve and deliver the highest levels of security," said Ed MacBeth, senior vice president, marketing and business development at ActivIdentity, a provider of smart card credential management. "Novell and ActivIdentity have teamed to provide federal agencies advanced solutions that address the entire spectrum of HSPD-12, FIPS 201 and PIV requirements. Integrating identity management with smart card credential management helps customers go far beyond the basic mandate, sets a strong foundation for security, and future proofs the investment."

“Novell's Identity Assurance solution is a natural extension of our world class Identity Management System and can help federal agencies meet HSPD-12 requirements," said Nick Nikols, vice president of product management for identity and security management solutions at Novell. "These latest enhancements also provide a solid foundation for meeting future security and identity-related mandates and help support a broad range of regulatory compliance requirements. While our solution is designed to meet the very high standards for government security and the PIV issuance process, it's also a great fit for any organization that needs to increase security with a smart card-based solution.”

About Novell

Novell, Inc. (Nasdaq: NOVL) delivers Software for the Open Enterprise™. With more than 50,000 customers in 43 countries, Novell helps customers manage, simplify, secure and integrate their technology environments by leveraging best-of-breed, open standards-based software. With over 20 years of experience, more than 5,000 employees, 5,000 partners and support centers around the world, Novell helps customers gain control over their IT operating environment while reducing cost. More information about Novell can be found at http://www.novell.com.

Novell is a registered trademark, and Software for the Open Enterprise is a trademark of Novell, Inc. in the United States and other countries. * All third-party trademarks are the property of their respective owners.